diff --git a/internal/config/subnet/help.go b/internal/config/subnet/help.go
index fbf692afb..f16713f33 100644
--- a/internal/config/subnet/help.go
+++ b/internal/config/subnet/help.go
@@ -31,18 +31,21 @@ var (
 			Type:        "string",
 			Description: "[DEPRECATED use api_key] Subnet license token for the cluster" + defaultHelpPostfix(config.License),
 			Optional:    true,
+			Sensitive:   true,
 		},
 		config.HelpKV{
 			Key:         config.APIKey,
 			Type:        "string",
 			Description: "Subnet api key for the cluster" + defaultHelpPostfix(config.APIKey),
 			Optional:    true,
+			Sensitive:   true,
 		},
 		config.HelpKV{
 			Key:         config.Proxy,
 			Type:        "string",
 			Description: "HTTP(S) proxy URL to use for connecting to SUBNET" + defaultHelpPostfix(config.Proxy),
 			Optional:    true,
+			Sensitive:   true,
 		},
 	}
 )